Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/B999A66AD54E11EE842E2F58C4F9AE02.roa
File:                     B999A66AD54E11EE842E2F58C4F9AE02.roa (raw, json)
Hash identifier:          vw+/iUHoOFUwAmpBNT98n/MAMjwloVjL5FS/iwIttZ8=
Subject key identifier:   36:96:5F:D8:19:7C:E5:C1:72:8E:E7:64:F5:8F:AC:C6:88:05:3B:66
Certificate issuer:       /CN=A9121821/serialNumber=9EBCB0C34E4F77F2278DB15C59E1EDAC7E55756E
Certificate serial:       D8
Authority key identifier: 9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/B999A66AD54E11EE842E2F58C4F9AE02.roa
Signing time:             Wed 09 Apr 2025 04:40:49 +0000
ROA not before:           Wed 09 Apr 2025 04:40:49 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     150736
IP address blocks:        103.77.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.crl
                          rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 05:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121821, serialNumber=9EBCB0C34E4F77F2278DB15C59E1EDAC7E55756E
        Validity
            Not Before: Apr  9 04:40:49 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67f5fa50-e787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:25:29:12:92:27:7b:4a:a1:16:ba:41:3a:95:
                    e5:c6:6f:bf:55:ce:4f:9d:41:b5:92:ad:27:f5:dc:
                    94:3d:50:a6:bb:1d:b4:fb:32:34:1f:cf:b5:d2:76:
                    47:0c:4d:2f:85:59:70:16:a8:5a:b1:df:a9:cb:b4:
                    b1:48:61:59:49:0c:17:a0:f6:ec:63:91:38:35:1b:
                    45:a2:ec:14:4a:72:7a:c0:d8:41:39:63:ec:97:cb:
                    d3:c8:20:d1:65:39:19:22:89:54:22:e8:16:d1:e6:
                    9d:69:e3:4a:e6:d6:a6:b5:b9:5a:78:45:cc:dc:ad:
                    5a:e5:34:66:a1:94:0b:56:84:e5:63:f2:29:73:98:
                    cf:7f:01:33:0a:bb:4c:6c:52:16:68:3d:34:3d:79:
                    e3:4b:ff:a3:e6:aa:04:14:22:00:44:81:a0:39:35:
                    ae:fb:a9:8e:a6:44:c0:90:aa:46:b3:a7:6c:61:07:
                    c1:4e:d8:e7:91:38:0b:6e:f0:a2:ec:6a:3b:5f:a2:
                    bc:03:06:2e:e1:4f:d8:e8:5f:f5:06:fe:3b:68:d5:
                    c3:7d:25:6a:b3:e9:b5:f6:d8:f9:2c:c0:b7:66:ce:
                    96:50:9a:17:3a:8f:95:ac:ae:79:83:47:86:46:07:
                    3f:7d:dc:34:26:5c:39:5c:72:08:9c:76:17:1b:bf:
                    d3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:96:5F:D8:19:7C:E5:C1:72:8E:E7:64:F5:8F:AC:C6:88:05:3B:66
            X509v3 Authority Key Identifier:
                keyid:9E:BC:B0:C3:4E:4F:77:F2:27:8D:B1:5C:59:E1:ED:AC:7E:55:75:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/nryww05Pd_InjbFcWeHtrH5VdW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nryww05Pd_InjbFcWeHtrH5VdW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121821/AB22EAC4D54911EE9497D880C4F9AE02/B999A66AD54E11EE842E2F58C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:ea:00:ba:69:0c:30:44:96:90:9d:d9:9b:54:00:69:3b:cd:
         05:70:bc:8c:30:40:fc:09:64:df:2f:a6:54:22:cf:8b:f0:fa:
         6a:36:63:74:39:f5:52:d0:c0:58:0b:c0:31:79:d7:8e:7c:ee:
         ff:ec:f1:6e:50:63:c0:84:66:54:68:f3:cc:46:4b:b2:c6:64:
         1b:0c:d8:b8:f8:cc:80:03:2b:93:aa:c8:e3:86:0f:4a:da:04:
         31:a7:eb:56:4b:d9:28:10:64:3b:35:6f:cf:4d:30:a0:eb:63:
         f0:a8:7c:b0:ae:f8:05:e5:af:3e:dc:21:93:48:b1:a7:44:87:
         73:aa:cd:fc:23:ea:ba:50:80:84:ea:a9:91:56:73:0e:26:7a:
         f8:62:d9:22:9a:11:95:79:25:2b:27:cc:e4:ad:14:c6:cc:7f:
         2c:ea:38:6c:17:34:9a:a7:b0:c6:a6:e9:9e:2a:1f:fa:1d:03:
         3c:ad:2a:8e:10:98:19:78:8a:16:8f:da:58:41:d3:87:c4:24:
         f0:d5:26:f4:88:8f:f4:e5:ff:7f:39:46:3a:24:2e:2d:41:70:
         8c:8f:e1:dd:c8:c4:01:89:b3:7c:bc:39:15:43:1c:dc:b4:47:
         c9:27:f1:42:8a:5f:8f:a6:5e:85:97:dc:24:48:c3:26:47:77:
         91:9a:c0:d5
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjE4MjExMTAvBgNVBAUTKDlFQkNCMEMzNEU0Rjc3RjIyNzhEQjE1QzU5RTFFREFD
N0U1NTc1NkUwHhcNMjUwNDA5MDQ0MDQ5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2Y1ZmE1MC1lNzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6iUpEpIne0qhFrpBOpXlxm+/Vc5PnUG1kq0n9dyUPVCmux20+zI0H8+10nZH
DE0vhVlwFqhasd+py7SxSGFZSQwXoPbsY5E4NRtFouwUSnJ6wNhBOWPsl8vTyCDR
ZTkZIolUIugW0eadaeNK5tamtblaeEXM3K1a5TRmoZQLVoTlY/Ipc5jPfwEzCrtM
bFIWaD00PXnjS/+j5qoEFCIARIGgOTWu+6mOpkTAkKpGs6dsYQfBTtjnkTgLbvCi
7Go7X6K8AwYu4U/Y6F/1Bv47aNXDfSVqs+m19tj5LMC3Zs6WUJoXOo+VrK55g0eG
Rgc/fdw0Jlw5XHIInHYXG7/TCQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDaWX9gZ
fOXBco7nZPWPrMaIBTtmMB8GA1UdIwQYMBaAFJ68sMNOT3fyJ42xXFnh7ax+VXVu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTgyMS9BQjIyRUFDNEQ1
NDkxMUVFOTQ5N0Q4ODBDNEY5QUUwMi9ucnl3dzA1UGRfSW5qYkZjV2VIdHJINVZk
VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25yeXd3MDVQZF9JbmpiRmNXZUh0ckg1VmRXNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjE4MjEvQUIyMkVBQzRENTQ5MTFFRTk0OTdEODgwQzRGOUFFMDIvQjk5OUE2NkFE
NTRFMTFFRTg0MkUyRjU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnTdgwDQYJKoZIhvcNAQELBQADggEBADbqALppDDBElpCd
2ZtUAGk7zQVwvIwwQPwJZN8vplQiz4vw+mo2Y3Q59VLQwFgLwDF514587v/s8W5Q
Y8CEZlRo88xGS7LGZBsM2Lj4zIADK5OqyOOGD0raBDGn61ZL2SgQZDs1b89NMKDr
Y/CofLCu+AXlrz7cIZNIsadEh3Oqzfwj6rpQgITqqZFWcw4mevhi2SKaEZV5JSsn
zOStFMbMfyzqOGwXNJqnsMam6Z4qH/odAzytKo4QmBl4ihaP2lhB04fEJPDVJvSI
j/Tl/385RjokLi1BcIyP4d3IxAGJs3y8ORVDHNy0R8kn8UKKX4+mXoWX3CRIwyZH
d5GawNU=
-----END CERTIFICATE-----
Generated at Mon Jun 2 07:10:22 2025 by rpki-client